Trojan Swif
Posted July 23, 2008
Trojan Swif is a damn backdoor Trojan. Like other backdoors, Trojan Swif pretends to be something harmless and gets creepy-cozy in your system using rootkit techniques. Trojan Swif tracks every keystroke you type, and Trojan Swif also tries to connect to servers to download more nasty crap onto your PC.
Did you buy your cute little Sony Vaio imagining some day it’d grow up and be part of a hackers’ botnet?
Yeah, just like you raised a son you’ll hope will join a street gang.
Let’s practice some prevention, and get rid of Trojan Swif.
Remove Trojan Swif Automatically, with SmitFraud
Don’t have a lot of time? What with YouPorn.com reading The Guardian, my charity work, and more, neither do I. If you don’t know how to manually delete Trojan Swif files, and don’t want to learn, here’s how you automatically remove Trojan Swif.
Before you start, print out these instructions—you’re going to have to restart your computer in Safe Mode. Also, back up your PC in case you make a mistake.
- Download SmitFraudFix for free, and save it to your desktop.
- Reboot your PC in Safe Mode.
- To reboot in Safe Mode using Windows XP, restart your PC, and when a progress bar appears at the bottom of the screen, hit F8 once every second. When you see the Windows Start-up menu, highlight Safe Mode and hit Enter. Your desktop will show up, and make whatever repairs necessary. Then reboot your system and allow it to start up as normal.
- To reboot in Safe Mode using Windows Vista, go Start > Run. Type “MSCONFIG” into the Open field, and click OK. From the BOOT.INI tab, check /SAFEBOOT and click Restart).
- Once your desktop loads, double-click SmitfraudFix.exe.
- After the credits roll, you’ll see a menu. Click option number two, “Clean (safe mode recommended)“. Click Enter and delete your files infected with Trojan Swif.
- SmitFraudFix will clean your PC. When SmitFraudFix is finished, its Disk Cleanup automatically starts.
- Once Disk Cleanup is done, it’ll ask you, “Registry cleaning – Do you want to clean the registry?” Type in “Y” (yes), and click “Enter“. When Disk Cleanup finishes, restart your PC.
- If your system’s wininet.dll is infected, SmitFraudFix asks you if you want to replace the file. If SmitFraud asks, “Replace infected file?” Type “Y” (yes) to answer and click “Enter“.
- Once that’s finished, restart your system.
- After restarting, a Notepad file might popup with a log of the files SmitFraudFix deleted. If it doesn’t popup, you can find the log as a file rapport.txt in Local Disk C:, the root of your hard drive.
- Restart your system again, in Safe Mode. Once it boots up, go to C:\Windows\Temp. Select “Edit“, select “Select All“, and click “DELETE“. Click “Yes” to confirm you want all these files to get trashed in the Recycle Bin.
- Restart your system one more time, in normal mode. Go to Windows Update and download any critical updates for your computer. You’re done.
Remove Trojan Swif with Your Bare Hands
You dig a work out. Manually removing Trojan Swif can be hard and time consuming, but apparently you’re into that. Obviously, I can’t guarantee these instructions will completely remove Trojan Swif from your system, but it’s worth a try. Just make sure you backup your system before you try to remove Trojan Swif manually.
Before you start, print out these manual Trojan Swif removal instructions and close all applications, including your web browser.
- Uninstall Trojan Swif: Select Start menu > Settings > Control Panel. Double-click “Add/Remove Programs“, and search for “Trojan Swif”. If you find Trojan Swif, uninstall Trojan Swif.
- Stop Trojan Swif processes: Select Start menu > Run. Type taskmgr, then click on the Processes tab for a list of running processes. Search for Trojan Swif processes, like “Trojan Swif.exe“, or any Trojan Swif processes I list below. Right-click “Trojan Swif.exe“, and click “End task“.

- Delete Trojan Swif files in Windows Vista and XP: Select Start menu > Settings > Search. Click For Files and Folders…. You’ll see a speech bubble asking you, “What do you want to search for?” Select All files and folders. Type the names of Trojan Swif files into the search box, including any Trojan Swif file I’ve listed below. Now select Local Hard Drives, and click Search. As soon as you see a bastard Trojan Swif file, just delete it.

17-71.swf
i28.swf - Unregister Trojan Swif DLL files: Select Start menu > Settings > Run. Type “cmd” in Run’s box, and click OK. To switch directories, type “cd” in the command box, hit the Space key, and type the directory where the Trojan Swif DLL file is located. If you don’t know which directory the Trojan Swif DLL file is located in, enter “dir” into the command box to see a directory’s contents. To go back one directory, enter “cd ..” in the command box and hit Enter. Once you find the Trojan Swif DLL file you want to remove, including any of the DLLs I list below, type “regsvr32 /u MadeUpDLLName.dll” (e.g., “regsvr32 /u Trojan Swif.dll”) and hit Enter. If you delete a DLL by mistake, type “regsvr32 MadeUpWhoopsName.dll” (e.g., “regsvr32 Trojan Swif.dll”) into your command box, and hit Enter.

- Unregister Trojan Swif registry keys: Select Start menu > Run. Type regedit, and click OK. Search for any Trojan Swif registry keys I list below. To delete these Trojan Swif registry keys, right-click the Trojan Swif registry key, select “Modify”, and click “Delete“.

- Delete Trojan Swif directories: Select Start menu > My Computer > Local Disk (C:) > Program Files > Show the contents of this folder. Search for “C:\ProgramFiles\Trojan Swif“, or any Trojan Swif directories I list below. Right-click these Trojan Swif directories. Click “Delete“, “Yes“, and “Yes” again to confirm you want to move the Trojan Swif folder into the Recycle Bin.
- Remove Trojan Swif desktop icons: Drag and drop any Trojan Swif icons into your Recycle Bin.
- Change your home page: If Trojan Swif hijacked your home page, select Start menu > Control Panel > Internet Options > General. Under “Home Page” select Use Default. Enter the URL you want as your home page (for example, “http://www.damntrojan.co.uk”), and select “Apply” and “OK“. Open a new browser window to make sure your home page has changed.
You’re done. Hopefully these Trojan Swif removal instructions got rid of Trojan Swif for you. Just so we’re clear on things, I can’t guarantee these instructions will completely remove Trojan Swif from your computer.
If you tried these instructions to get rid of Trojan Swif and they didn’t work, throw your computer out the window.
Or consult professionals.
Trojan Swif Might Be Rogue Anti-Spyware
WTF is Rogue Anti-Spyware?
Rogue anti-spyware is a nice way of saying some anti-spyware software may be a fake. Rogue anti-spyware, at best, is anti-spyware software not proven to protect your PC. Rogue anti-spyware, at worst, is installed by a Trojan or browser security holes, gives you false positives in scans, and pops up fake security alerts to scare you into buying it.
Some rogue anti-spyware even is created by spyware and adware folk, or installs spyware onto your PC.
Sound like a scam?
It is.
If you’re infected with fake anti-spyware like Trojan Swif, you could see a Trojan Swif popup posing as a security alert. Maybe it looks like this:

Why Rogue Anti-Spyware Sucks
Rogue anti-spyware, like Trojan Swif, has a few qualities that make it faker than a chest on a Trump chick.
- Fake alerts and false positives: Rogue anti-spyware can drive you crazy with fake security alerts popping up, telling you you’re infected with spyware threats that don’t even exist.
- Copycat images: Rogue anti-spyware sometimes copies the look of real anti-spyware (think of that knock-off Fucci bag you bought your girl friend). More often though, rogue anti-spyware just looks like other fakes.
- High-pressure sales: Rogue anti-spyware will sell you harder than Crazy Gideon pimps an old tape cassette player. Think scare tactics, like fake alerts, and exaggerated “security” scans of your system.
- Poor detection: Besides rogue anti-spyware often plugging in fake threats in security scans, rogue anti-spyware can be sloppy about telling you what you’re really infected with. For instance, rogue anti-spyware might say you’ve got 13 threats, but not what kind of “threats.” Or maybe the rogue says you’re infected with MadeUpParasite, but it doesn’t tell you which files are actually on your computer.
- Weak scans: Rogue anti-spyware might scan your system, but skim over important folders. Though, really, I’d be surprised if it did any scanning at all.
Did Trojan Swif use these moves to try to get you to buy Trojan Swif?
Popularity: 2% [?]
WTF? Trojan Swif?
Yep. Read more:
» Trojan.Zlob.G» So Many Trojans
» Trojan-Downloader.Win32.Dadobra.bru
» Trojan.Agent.artu, Trojan.Agent.aaqu & Trojan.Agent.ason
» Trojan Mania
More in Trojans »


